Skip to content
Search Create account

DEV Community

DEV Community is a community of 620,183 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create new account Log in
loading...

Discussion on: So you think you're just gonna `npm install`? Think again

View post Full discussion
Collapse
saurabhdaware profile image
Saurabh Daware 🌻 •

Hi, great article! I have a question:
So I've seen dependabot updating package-lock file in its commits, so how does it work? Does changing the integrity hash in package-lock.json change things ?

Collapse
lirantal profile image
Liran Tal Author •

if you run an npm install with npm ci then npm will only consult the lockfile, and so changing the lockfile directly will work.